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Abstract 

Let / denote length preserving function on words. A classical algorithm can 
be considered as T iterated applications of black box representing /, beginning 
with input word x of length n. 

It is proved that if T = 0{2~ ), e > 0, and / is chosen randomly then with 
probability 1 every quantum computer requires not less than T evaluations of / 
to obtain the result of classical computation. It means that the set of classical 
algorithms admitting quantum speeding up has probability measure zero. 

The second result is that for arbitrary classical time complexity T and / 
chosen randomly with probability 1 every quantum simulation of classical com- 
putation requires at least Q(s/T) evaluations of /. 

1 Introduction 

In few recent years the overwhelming majority of studies on quantu m alg or ithm s 
demonstrated its strength compared with classical ones (look at mi ,ra , 



3h| ). The most known advance here is Grover's result about time 0(\/N) of 
quantum exhaustive search in area of cardinality N ([ |Gr[] ). 

However, there exist natural problems for which quantum computer can 
not speed up classical ones. Let ui* denote the set of all words in alphabet 
lo. For a length preserving function / : {0, 1}* — > {0, 1}* and x £ {0, l} n 
the result of k iterated applications of / is defined by the following induction 
f {a} (x) = x, f {k+1} {x) = f(f {k} (x)). In the work pz97| it is proved that the 
result of this computation: 

x — > f{x) — /(/(*)) — > . . . f^Jix) ...) = f^(x) (1) 

T 

cannot be obtained by a quantum computer substantially faster than by classical 
if T = 0(2™/ 7 ). 
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What is the significance of such black box model? The point is that the 
following principle is informal corollary from classical theory of algorithms. 

Principle of relativization Every general method which can be relativized 
remains valid after relativization. 

Given a code of classical algorithm the only way to obtain the result of its 
action on input word x of length n is to run this algorithm on x. In course of 
computation the code of algorithm can be applied only as black box because 
in general case we can not analyze its interior construction. Therefore we can 
assume that a typical classical computation has the form (1) where a length 
preserving function / is used as oracle. Time complexity of this computation is 
T in within constant factor. 



The result of J0z97[ was strengthened in the works [ |FGGS98| and ]BBCMW98 | 
to arbitrary T, Namely, both these works proved independently that every 
quantum computation of the metafunction PARITY : Par (g) = (§) g(x) of a 

X 

function g : {0, 1}™ — ► {0, 1} requires exactly 2™ _1 evaluations of g (half as 

many as classi cal). 

The work [ BBCMW98| studied computations of metafunctions of the form 



F '■ {d} — > {0> 1} where {g} is the set of functions of the form g : {0, 1}™ 
{0,1}. Specifically, it is proved that if T = o(2"), n — > 00, then only vanishing 
part of such metafunctions can be computed exactly with T evaluations of g on 
quantum computer. The only known way to obtain lower bounds for iterated 
applications of black box from lower bounds for metafunctions is computation 
of PARITY. The algorithm for computation of Par (g) can be represented as 
iterated application of particular black box which uses g as subroutine. The set 
of particular " PARITY" -black boxes have probability measure zero among all 
possible black boxes, hence last two works remain the possibility that for some 
fairly large part of oracles there exists quantum speeding up of their iterations. 

In the present work we prove that if T is not very large then the set of 
black boxes whose T iterations admit any quantum speeding up has probability 
measure zero. 

Theorem 1 If T = 0(2 T +^), e > 0, then for a black box f chosen randomly 
with probability 1 every quantum computation of T iterations of f requires T 
evaluations of f . 

For arbitrary number T of iterations more weak lower bound for quantum 
simulation is established in the following 

Theorem 2 For a black box f chosen randomly with probability 1 every quan- 
tum computation of T iterations of f requires fl(y/T) evaluations of f . 
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2 Outline of Quantum Computations 



Oracle quantum computers will be treated here within the framework of ap- 
proach proposed by C.Bennett, E.Bernstein, G. Brassard and U.Vazirani in the 



work [BBBV] . They considered a quantum Turing mach ine w ith oracle as a 
model of quantum computer (for the definitions look also at |BV| ) . In this paper 
we use slightly different model of quantum computer with separated quantum 
and classical parts, but the results hold also for the quantum Turing machines. 
We proceed with the exact definitions. 

Our quantum query machine consists of two parts: quantum and classical. 

Quantum part. 

It consists of two infinite tapes: working and query, the finite set IA of unitary 
transformations which can be easily performed by the physical devices, and 

oo 

infinite set F = |J F n of unitary transformations called an oracle for the length 



n=l 



preserving function / : {0,1}* — ► {0,1}*, each F n acts on 2 2 ™ dimensional 
Hilbert space spanned by {0, l} 2 ™ as follows: F n \a,b) — \a, /(a) ©6), a,b £ 
{0, 1}™, where denotes the bitwise addition modulo 2. 

The cells of tapes are called qubits. Each qubit takes values from the complex 
1-dimcnsional sphere of radius 1: {zqO + ziI | 21,22 £ C, \zo\ 2 + \z\ | 2 = 1}. Here 
and 1 are referred as basic states of qubit and form the basis of C 2 . 

During all the time of computation the both tapes are limited each by two 
markers with fixed positions, so that on the working (query) tape only qubits 
v±, v%, . . . , v T (u T +i, i> T +2i ■ • • i v r+2n) are available in a computation with time 
complexity r = r(n) on input of length n. Put Q = {v\, V2, • ■ ■ , tv+2n}- A basic 
state of quantum part is a function of the form e : Q — ► {0, 1}. Such a state 
can be encoded as |e(i>i), e(i>2), . . . , e(v T +2n)) an d naturally identified with the 
corresponding word in alphabet {0,1}. Let K = 2 T+2 ™; e , e 1; . . . , e^-i be 
all basic states taken in some fixed order, H be K dimensional Hilbert space 
with orthonormal basis eo, e%, . . . , e^-i- H can be regarded as tensor product 
Hi TL2 ® • ■ ■ ® %T+2n of 2 dimensional spaces, where Hi is generated by all 
possible values of Vi, i = 1, 2, . . . , r + 2n. A (pure) state of quantum part is 
such an element x £ H that \x\ = 1. 

Time evolution of quantum part at hand is determined by two types of 
unitary transformations on its states: working and query. Let a pair G, U be 
somehow selected, where G C {1, 2, . . . , r + 2n}, U £ U is unitary transform on 
2card(G) di me nsional Hilbert space. 

Working transform Wg,u on H has the form E§Z)U', where U' acts as U 
on Hi in the basis at hand, E acts as identity on (g) Hi- 

ieG i£G 

Query transform Quj on H has the form E^)F^, where F' n acts as F n on 

r+2n r 

Hi and E acts as identity on H L . 

i— r+l i—1 
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Observation of the quantum part. If the quantum part is in state x = 

K-l 

^2 an observation is a procedure which gives the basic state with Preb- 

le 

ability | A, | 2 . 

Classical part. 

It consists of two classical tapes: working and query, which cells are in one- 
to-one correspondence with the respective qubits of the quantum tapes and have 
boundary markers on the corresponding positions. Every cell of classical tapes 
contains a letter from some finite alphabet u). Evolution of classical part is 
determined by the classical Turing machine M with a few heads on both tapes 
and the set of integrated states of heads: {qb, Qw, Iq-, Qoi ■ ■ .}. We denote by h(C) 
the integrated state of heads for a state C of classical part. 

Let D be the set of all states of classical part. 

Rule of correspondence between quantum and classical parts has the form 
R : D — ► 2{ 1 > 2 >~> T + 2n > x U, where VC 6 D R{C) = (G, U), U acts on 2 card ( G) 
dimensional Hilbert space so that U depends only on h(C), and the elements 
of G are exactly the numbers of those cells on classical tape which contain the 
special letter oo£w. 

A state of quantum computer at hand is a pair S = (Q(S), C(S)) where 
Q(S) and C(S) are the states of quantum and classical parts respectively. 

Computation on quantum computer. It is a chain of transformations of the 
following form: 

So — ► Si — ► . . . — ► S T , (2) 

where for every i = 0, 1, . . . ,r — 1 C(Si) — > C(Si+i) is transformation deter- 
mined by Turing machine M, and the following properties are fulfilled: 

if h(C(Si)) = q w then Q(S l+1 ) = W R{CiSi ))(Q(Si)), 

if h(C(Si)) = q q then Q(S i+ i) = Qu f {Q(Si)), 

if h(C(Si)) — qb then i = 0, Q(S ) = e , C(S a ) is fixed initial state, corre- 
sponding to input word a £ {0, 1}™, 
if h(C(Si)) = q a then i = r, 
in other cases Q(Si+%) = Q(Si). 

We say that this quantum computer (QC) computes a function F(a) with 
probability p > 2/3 and time complexity r if for the computation (^) on every 
input a the observation of S T and the following routine procedure fixed be- 
forehand give F(a) with probability p. We always can reach any other value 
of probability po > p if fulfill computations repeatedly on the same input and 
take the prevailing result. This leads only to a linear slowdown of computation. 
There are computations with bounded error probability. If p — 1 then we have 
exact computation. 
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3 The Effect of Changes in Oracle on the Result 
of Quantum Computation 

For a state Cj = \si, S2, . . . , s r+2Tl ) of the quantum part we denote the word 
s T +\s T+ 2 ■ ■ ■ s T + n by q(ej). The state S of QC is called query if h(C(S)) = q q . 
Such a state is querying the oracle on all the words q(ej) with some amplitudes. 
Put K = {0, 1, . . . ,K - 1}. Let ( = Q(S) = £ XjBj. Given a word a G {0, 1}™ 

for a query state we define: 

*«(0= E w 2 - 

j": q(e j )=a 

It is the probability that a state S is querying the oracle on the word a. In 
particular, £ <5 a (£) = 1. 

ae{0,l}" 

Each query state S 1 induces the metric on the set of all oracles if for length 
preserving functions /, g we define a distance between them by 

ds(f,g)=[ E 6 "($ 

\a- /(o)#s(o) 

Lemma 1 Let Qu^, Qu ff be query transforms on quantum part of QC corre- 
sponding to functions f, g; S be a query state. Then 

|Qu / (5)-Qu H (5)|<2d s (/ l5 ). 

Proof 

Put C = {j G K I /(«( ej )) ^ g(q(e 3 ))}. We have: |Q U/ (S) - Qu ff (5)| < 
2(E (l A il) 2 ) 1/2 < 2 ds(/,5)- Lemma is proved. 

Now we shall consider the classical part of computer as a part of working 
tape. Then a state of computer will be a point in K 2 dimensional Hilbert space 
Til. We denote such states by £, x with indices. All transformations of classical 



part can be fulfilled revcrsibly as it is shown by C.Bennett in the work [Be]. This 
results in that all transformations in computation (^|) will be unitary transforms 
in Tii- At last we can join sequential steps: Si — > $t+i — > ■ • • — > Sj where 
Si — ► Si+i, Sj — > Sj+i are two nearest query transforms, in one step. So the 
computation on our QC acquires the form 

Xo — > Xi — > ■■■ — ► Xt, 
where every passage is the query unitary transform and the following unitary 
transform Ui which depends only on i: \i — > X% — ~* Xi+i- We shall denote 
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C/i(Q U/ (0) by Vi, f (S), then x*+i = VS,/(xO> i = 0, 1, . . . , t - 1. Here * is the 
number of query transforms (or evaluations of the function /) in the computa- 
tion at hand. Put d a (£) = y/S a (£)- 

Lemma 2 7/ xo — * Xi — * ■ ■ ■ — * Xt is a computation with oracle for f, 
a function g differs from f only on one word a G {0, 1}™ and xa — * Xi — > 
. . . — ► x't i s a computation on the same QC with a new oracle for g, then 

t-i 

\Xt- X 't\ <2^d a ( Xl ). 

i=0 

Proof 

Induction on t. Basis is evident. Step. In view of that T4-i,g is unitary, 
Lemma 1 and inductive hypothesis, we have 

\Xt ~ Xt\ = \V t -ij(xt-i) - V t - hg ( X 't-i)\ < 

\Vt-ij( X t-i) - V t . hg { Xt -i)\ + \Vt-i, g (Xt-i)- V t -i, g (Xt-i)[ < 

2d ( Xt -i) + \xt-i - Xt-i\ = 2d„(x*-i) + 2 E d (xi) - 2^ d a (xi). 
Lemma is proved. 

4 Basics of Probabilistic Method 

To analyze black boxes chosen randomly with some probability we need some 
notions of probability theory. 

Given a set Af we say that some set E C 2^ of its subsets is a-algebra 
(algebra) on Af iff 0,7V G £ and S is closed with regard to operations of sub- 

oo oo 

tractions: A \ B and denumerable (finite) joins and intersections: (J A i} f] Ai. 

i=0 i=0 

Elements of S are called events. 

A probability measure on X is such a real function on events P : E — ► [0, 1] 
that P(0) = 0, P(Af) = 1, and for every list {Ai} of mutually exclusive events 
the following axiom of additivity takes place. 

(oo \ oc 
i=0 / i=0 

The minimal cr-algebra containing a given algebra S C 2^ is denoted by 
E(S'). Every probability measure on algebra S can be extended to the proba- 
bility measure on E(S'). Wc shall denote it by the same letter P. 

Let M n denotes the set of all mappings g : {0, 1}" — ► {0, 1}". Put 
card(M„) = v n . We have v n = 2" 2 ". Let F be the set of all oracles. An 
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element of F is length preserving function / : {0, 1}* — ► {0, 1}*, which may 
be regarded as a list 51,32, ■ ■ • of the functions gi G Mj. We are going to de- 
fine the probability measure distributed uniformly on oracles. For any fixed 
gi G Mi i = 1, 2, . . . , n put A(g 1 ,g 2 , ■■■,g n ) = {/ | / = {91,92, ■ ■ ■ , g n , ■ ■ ■)} 
and define P(A(gi, . . . , g n )) = {vxv 2 ■ ■ ■ u n ) _1 - It is readily seen that axiom of 
additivity is satisfied for the extension of P to the minimal algebra S containing 
all A(gi, . . . , g n ) for all n and g\, g 2 , ■ ■ ■ ,9n an d hence to the probability measure 
on S(S). 

Definition The probability measure on oracles distributed uniformly is the 
probability P on a-algebra £ = 

Example Given n and two words x, y G {0, 1 }". Then the probability of 
that /(x) = y is P(B xy ) where B xy = {/ | /(x) = y}. This probability is 2 _ ™. 

For events 4,fi £ S, P{B) 7^ the conditional probability is defined by 
P(A I B) = P(AnB)/P(B). Full group of events for A is such set F u F 2 , . . . , F m 

m 

of events with nonzero probabilities that Fi H Fj = for z 7^ j and |J F{. 

m 

In this case P{A) = J2 P(A \ Fi)P(Fi) ( the folmula of full probability). 

i=i 

5 Impossibility of Quantum Speeding Up for the 
Bulk of Short Computations 

Proof of Theorem 1 

Let t(n),T(n) be integer functions, T = 0(2t+i), e > 0, C be quantum 
computer. Denote by S(C,n,t,T) the set of such functions / € M n that C 
computes /^(O) using no more than t evaluations of /, where is the word of 
zeroes. 

Lemma 3 For every quantum computer C and e > there exists such number 
n that P(S(C, n,T —1, T)) < e. 

Proof of Lemma 3 

To prove Lemma 3 we need some technical propositions. Put a = 5 + 1. Fix 
integer n. 

Now we shall define the lists of the form Q — fi,%,Xi) where £j is a state 
from Hi, = 1, fi G M n , xi G 7^ C {0, 1}" by the following induction on i. 

Definition 

Basis: i = 0. Put £ = xo> let fo G A^n be chosen randomly, x = 0, 
To - {0, 1}". 
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Step. Put 



6+1 = Vijtfe), 

T l+1 =%nR t , Ri = {a\ Saiti+i) < 



We define Xi+i as randomly chosen element of %+i and put 

_ f /i(ar), if x 7^ .Tj, 
• 4+1 \ a:j + i, if a; = 



The lists of the form Q are not defined uniquely and we denote the set of 
all such lists Q by Di, i = 1,2,.... Let N{ be the set of such functions fi £ M n 
that there exist Xi such that fi,%, Xi) £ Di. 

Proposition 1 If i <T, n — ► oo ; i/ien 



P(JVi) = 1-0 



2™ 



Proof o/ Proposition 1 

Induction on i. Basis follows from the definition of £o- Step. Given some list 
G = fiiT~ii x i), m the passage to Ci+i the only arbitrary choice is the choice 

of Xi+\. This choice can be done correctly with probability 2 ~^ , because 

card(7^) > 2™ - T a i > 2" - T Q+1 . Hence in view of inductive hypothesis the 

resulting probability is (l - O (^)) (l - ^) = (l - O ( T ° + ^ +1) )) 
with the same constant. Proposition 1 is proved. 

Now turn to the proof of Lemma 3. Let in what follows t = T — 1. Given 
lists Q, we introduce the following notations: Vi — Vij t , V* = Vij t . Let 
the unitary operator V 1 be introduced by the following induction: V°(x) = 
Vo(x), V t (x) = Vi(V' L ~ 1 (x)), and the unitary operator V be defined by Vq = V *, 
Vi(x) = V?(Vi- 1 (x)).Tbent i+1 = V i fa). 

put Co = 6+i - v*(&), ^ = |6 - a a, = \v*&) - v^. it 

follows from the definition that fi differs from f t at most on the set Xi = 
{xi, Xi+\, . . . , x t -i} where Va £ Xi S a (^i) < Consequently, applying Lemma 
1 we obtain 

2t 1 / 2 

A * < -W2- ( 3 ) 



Proposition 2 di < Afc- 

fe<i 
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Proof 

Induction on i. Basis follows from the definitions. Step: 

< - Vifo)] + M&) - Vi{%)\ = a, + d t . 

Applying the inductive hypothesis we complete the proof. 
Thus in view of (3) Proposition 2 gives 

2it 1/2 

Vi = l,...,t d^j^. (4) 

It follows from the definition of the functions fi that Vz < t < y^- 

Taking into account inequality ), we conclude that for x = Xt 

d x (& - & < f-^, d x (&) < cUteO < d x (6 - + d x &). 
Hence we have 

< f^- (5) 

Now consider some oracle /t+i = fr- If £o — > £" — > • • • — * £" 1S the 
nputation of / t j 
inequality (pj) give 



computation of / t+ i (0) on our QC with oracle for ft+i, then Lemma 2 and 



|£-£'|<2£d x (^<^< 7 (n) 

for a — 5 + f , where 7(71) can be made arbitrary small for appropriate n. Hence, 
observations of states ^ and give the same results with closed probabilities. 
Then if our computer does computes / t+1 (0) = a, then amplitudes of basic 
states in must concentrate on only one unique basic state corresponding to 
a. 

Let P(not | ft) be the probability to choose an oracle of the form fx such 

r<rn _ ITT 

that / T / (0) ^ /t_i(0) given f t . In view of the definition of computation it is 
the probability of that with a given choice of ft our computer does not compute 
/ T T ^(0) correctly. We have P(not | f t ) = 2 "~ 2 ^T +1 — ► 1 (n — ► oo) for every 
choice of ft, because there are at least 2™ — T a+1 appropriate possibilities for 
the choice of Xt+i- Furter, let p be the probability to choose an oracle /t such 
that our computer does not compute (0) correctly. With the formula of full 
probability and Proposition 1 we have 

P = J2 P(pob | ft)p(ft) = ^ il-0 f—j co). 

/t 

At last the probability p no t to choose oracle / such that f^ T ^(0) is not 
computed on computer at hand will be p not > p, then p not — ► 1 (n — ► oo) . 
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Lemma 3 is proved. 

Now turn to the proof of Theorem 1. Let Ci, Ci, . . . be all quantum query 
machines taken in some fixed order, R(C, n, t, T) denote the set of all functions 

S r r\ — 

g n G M n such that C does not compute gn (0) using no more than t evaluations 
of g n . Take arbitrary e > 0. Applying Lemma 3 find for every i = 1, 2, . . . such 
number n t that P{R{C l ,n t ,T - 1,T)) > 1 - e2~ 4 . Furtcr, if Af denotes the 

set of oracles which T iterated applications do not admit quantum speeding 

00 _ 

up, we have f] R(Ci,n i} T — 1,T) C Af. For the complementary set Af C 

00 _ 00 

U S(Ci,rii,T-l,T). By axiom of additivity P(Af) < £ P(S(Ci, n h T- 1, T)) 
i=i i=i 
00 

= X e2~* = e. Theorem 1 is proved. 

i=l 

6 Lower Bound for Quantum Simulation in Gen- 
eral Case 

Proof of Theorem 2 

As in the previous section it would suffice to prove the following 

Lemma 4 For every quantum query machine C , e > and functions t(n), T(n) : 
t 2 = o{T) (n — ► 00) there exists integer n such that P(S(C,n,t,T)) < e. 

Proof of Lemma 4 

In our notations for randomly chosen oracle / and number n put f k = 
/ w (0), k = 0, 1, . . . ,T. Define matrix (a y ) bya„ = Sp(xi), i = 0, 1, . . . , t; j = 
0,1,..., T. 

T t T 

We have for every i = 0, . . . , t < 1, consequently t > a ij — 

3=0 1=0 j=o 

T t t 

a ij an d there exists such t e {0,1, ... ,T} that a ir — - If- 

j=0 i=0 i=0 

Changing arbitrarily the value of / only on the word f T we obtain a new 
function g where g^(0) ^ f^ T H®) with probability p n — ► 1 (n — > 00). Let 
Xo — > Xi — > • • • — > Xt be computation on QC with oracle for g. Then for 
such choice of g with probability p n we have \xt — Xt\ — 1/4 if / G S(C, n, t, T). 

t 

On the other hand Lemma 2 gives |xt — Xt\ 2 X) — V^E"" — 

»=o 

2t/T 1 / 2 < j(n) — > (n — > 00). Then by the definition of computation 
with probability p n — > 1 (n — ► 00) ff^^O) is not computed by quantum 
computer at hand. Lemma 4 is proved. Theorem 2 is derived from Lemma 4 
just as Theorem 1 from Lemma 3. Theorem 2 is proved. 
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